SAML 2.0 IdP Metaadatok

Ezeket a metaadatokat a SimpleSAMLphp generálta. Ezt a dokumentumot küldheti el föderációs partnerei számára.

A következő címről töltheti le a metaadatokat:

https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/metadata.php

Metaadatok

SAML 2.0 XML formátumban:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>MTA_KIK_admin</md:GivenName>
    <md:EmailAddress>admin@konyvtar.mta.hu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp fájl formátumban - akkor használható, ha a másik oldalon SimpleSAMLphp van:

$metadata['https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.konyvtar.mta.hu/simplesaml/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => 'MIID4zCCAsugAwIBAgIJAKaPokjXovyUMA0GCSqGSIb3DQEBCwUAMIGHMQswCQYDVQQGEwJIVTEQMA4GA1UECAwHSFVOR0FSWTERMA8GA1UEBwwIQlVEQVBFU1QxDzANBgNVBAoMBk1UQUtJSzEcMBoGA1UEAwwTaWRwLmtvbnl2dGFyLm10YS5odTEkMCIGCSqGSIb3DQEJARYVYWRtaW5Aa29ueXZ0YXIubXRhLmh1MB4XDTE1MDkyNDA5MDkzMFoXDTI1MDkyMzA5MDkzMFowgYcxCzAJBgNVBAYTAkhVMRAwDgYDVQQIDAdIVU5HQVJZMREwDwYDVQQHDAhCVURBUEVTVDEPMA0GA1UECgwGTVRBS0lLMRwwGgYDVQQDDBNpZHAua29ueXZ0YXIubXRhLmh1MSQwIgYJKoZIhvcNAQkBFhVhZG1pbkBrb255dnRhci5tdGEuaHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzdUYQHtnNHwt48Z1AJrFG8efbDElt/hyM2Wjk28Wrxe3WaR7KIwVBzAC05D25UqwJT+bbLjEze0fJHoxEzqK4QBJ4BjD5QZgij/us7OpH7tY1BMwYtReEJZGZqa8rUS8pS2WubgdsDhxMNmGSGFP36Ekc/F3UttK30lptmZZIrNUpWcuoLevPNpR4skjbpjQzldXD4ofeuWzoBpLvOTavT1k4RmaDi9t4oEwzCpT6kBNHGviPi8Ex85fyavP2mm1A7gjpsaduoTjsr4WHa0VxyDw4s5ISQXfIaFBFcRi6fdoZeMMcm+ri/nHX8VK6QxedlF+9P4qlPMjzLEK7M4fAgMBAAGjUDBOMB0GA1UdDgQWBBTs0pGV6rDZ8KguQhTrJlN4KN8mETAfBgNVHSMEGDAWgBTs0pGV6rDZ8KguQhTrJlN4KN8mETAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAWFh2q0GlEnluvtu/GsNs6yfD13BLFEe3YPtvNo0F+omFwYogauGB686xNSRRpIv0J3JDkk+D/F3w/4bnEQ8HUy5YNuOJdwUjJqYkgwZQ/N47E/1IiJ7teQfC3XwSKZOewbU3UiVM43dIDgyfhpTiPIeVEHB/XYB0+eJ7pTP5kV+O6fVQqLk+2iXh8qHDbAZWSorRB+BjDED+WzsNnGWQJLpB2n4O/SJP8EeCTxGpqr7dNxBCSnS8WQdrJ0EP3WVlj8ZoFsLXKfrQOhBKtltlm13tXyBM2G5WglR4pzm2iE91Su+ofXSKCkgk2IG54jnQuf6NomKtebbFq2SIxXsys',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'admin@konyvtar.mta.hu',
      'contactType' => 'technical',
      'givenName' => 'MTA_KIK_admin',
    ),
  ),
);

Tanúsítványok.

PEM formátumú X509 tanúsítvány letöltése.

idp.crt